$ rpki-client -vvf rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft File: QJOHCXJ0OMjB3r_9BBWQWEggxug.mft (raw, json) Hash identifier: ztLAUbd3L+LHAmNoFksPYEj+N9zYTO+F35kHaDGT5qw= Subject key identifier: 8E:4A:98:47:ED:EE:DD:87:08:6F:F1:50:27:95:86:CD:E4:B9:37:2C Authority key identifier: 40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8 Certificate issuer: /CN=A917618F/serialNumber=40938709727438C8C1DEBFFD041590584820C6E8 Certificate serial: 12D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft Manifest number: 12CF Signing time: Sun 10 Aug 2025 17:03:22 +0000 Manifest this update: Sun 10 Aug 2025 17:03:22 +0000 Manifest next update: Sun 17 Aug 2025 17:03:22 +0000 Files and hashes: 1: QJOHCXJ0OMjB3r_9BBWQWEggxug.crl (hash: RND3C2Pk9QwfD9vfCl6znGFDhczt0gD3YSjSufXo3i4=) 2: 2FE4DA1EC2E111E8A19CB72FC4F9AE02.roa (hash: HkQW1ELmD+iLXWXgNsuJGsFujvrmVSrBFXmyCQkIzxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4824 (0x12d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917618F, serialNumber=40938709727438C8C1DEBFFD041590584820C6E8 Validity Not Before: Aug 10 17:03:22 2025 GMT Not After : Aug 17 17:03:22 2025 GMT Subject: CN=6898d0da-87bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c9:ea:fd:0f:f1:5b:b5:fa:63:42:a3:db:bb: 20:ec:c5:b4:b8:6d:b4:b1:82:5d:51:97:24:30:f6: ba:89:a2:d4:31:cc:d8:f3:c1:92:68:a0:b9:92:50: 7e:b6:a9:9b:0c:d3:9f:66:60:f6:e5:71:af:20:e0: 22:4d:84:9a:2b:b3:aa:6c:7a:bd:5d:b9:49:ee:3e: a8:72:11:2c:27:38:40:d8:e5:54:9b:8d:0b:f7:44: 95:48:51:5d:a9:f0:06:31:1e:fb:6a:bd:17:9b:b9: 78:73:4f:36:07:ea:76:16:39:23:6a:74:6c:5f:8b: e7:61:a8:1e:77:68:71:60:f2:65:e9:c5:07:0d:ea: 47:bb:52:e3:5b:0d:2f:86:15:23:c3:61:8e:94:3d: 78:26:61:48:2c:a9:af:7b:3d:df:d0:af:e7:6b:14: 74:f7:3d:c6:61:21:20:45:c2:99:73:52:83:1d:8a: 8f:5f:d1:24:bc:b9:06:58:c1:89:4e:6c:28:db:02: 34:62:15:9b:9e:16:67:17:c3:15:0b:c4:f1:9e:15: 3e:b2:44:df:ee:bf:1d:3f:e0:45:1c:d6:bc:b5:82: 44:a7:e4:10:20:97:81:af:9a:43:2f:89:2d:30:62: c5:a7:da:eb:82:77:ca:1e:9b:69:d3:49:7c:e9:49: 96:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4A:98:47:ED:EE:DD:87:08:6F:F1:50:27:95:86:CD:E4:B9:37:2C X509v3 Authority Key Identifier: keyid:40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:2d:0f:96:8c:7a:29:55:c2:09:65:12:99:a6:a2:77:7d:9e: 38:d9:66:90:94:2a:14:9c:2e:13:29:bb:b0:af:85:4d:30:1d: a2:d9:db:e2:7c:98:4c:48:dc:bf:e5:13:d3:d0:9f:b0:a4:e1: 7d:a3:47:2a:f6:d8:5e:83:98:02:99:98:8d:c2:f1:00:3b:5c: d3:18:1c:bc:b8:68:6e:53:b6:69:9c:c8:b5:38:31:54:dd:a5: 34:b2:c0:0a:ca:7a:77:7d:c2:ac:00:e8:7b:ce:64:fb:6d:3c: 89:53:48:0d:a4:da:dc:85:aa:b5:23:8a:c2:db:36:0c:8f:b5: b9:b0:de:3f:a3:a5:12:e6:b3:41:c4:94:0f:1c:ce:dd:11:11: 7d:34:fc:66:50:98:c8:07:90:58:a8:c7:a5:51:b9:bc:a7:06: a3:ed:36:16:f5:79:98:c0:95:75:d3:26:8c:ca:bf:dd:fe:f9: 99:17:73:06:6e:df:d1:a8:87:87:de:79:ad:99:82:9d:0b:67: f4:9a:9a:75:95:c4:14:2a:5c:30:4c:d9:82:70:ca:27:ab:ea: 24:f3:0b:a8:85:3a:4d:26:f3:85:52:b7:a0:eb:25:4d:13:4c: db:a7:eb:d1:5f:20:a1:86:90:5c:fc:3a:3f:56:3a:01:a0:bb: ed:e0:c5:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYxOEYxMTAvBgNVBAUTKDQwOTM4NzA5NzI3NDM4QzhDMURFQkZGRDA0MTU5MDU4 NDgyMEM2RTgwHhcNMjUwODEwMTcwMzIyWhcNMjUwODE3MTcwMzIyWjAYMRYwFAYD VQQDEw02ODk4ZDBkYS04N2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8nq/Q/xW7X6Y0Kj27sg7MW0uG20sYJdUZckMPa6iaLUMczY88GSaKC5klB+ tqmbDNOfZmD25XGvIOAiTYSaK7OqbHq9XblJ7j6ochEsJzhA2OVUm40L90SVSFFd qfAGMR77ar0Xm7l4c082B+p2FjkjanRsX4vnYaged2hxYPJl6cUHDepHu1LjWw0v hhUjw2GOlD14JmFILKmvez3f0K/naxR09z3GYSEgRcKZc1KDHYqPX9EkvLkGWMGJ Tmwo2wI0YhWbnhZnF8MVC8TxnhU+skTf7r8dP+BFHNa8tYJEp+QQIJeBr5pDL4kt MGLFp9rrgnfKHptp00l86UmWxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5KmEft 7t2HCG/xUCeVhs3kuTcsMB8GA1UdIwQYMBaAFECThwlydDjIwd6//QQVkFhIIMbo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjE4Ri9EMjhENzVDMEMy REYxMUU4QTY0RUZEMkNDNEY5QUUwMi9RSk9IQ1hKME9NakIzcl85QkJXUVdFZ2d4 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FKT0hDWEowT01qQjNyXzlCQldRV0VnZ3h1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjE4Ri9EMjhENzVDMEMyREYxMUU4QTY0RUZEMkNDNEY5QUUwMi9RSk9IQ1hKME9N akIzcl85QkJXUVdFZ2d4dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeLQ+WjHopVcIJZRKZpqJ3fZ442WaQlCoUnC4TKbuwr4VNMB2i2dvi fJhMSNy/5RPT0J+wpOF9o0cq9theg5gCmZiNwvEAO1zTGBy8uGhuU7ZpnMi1ODFU 3aU0ssAKynp3fcKsAOh7zmT7bTyJU0gNpNrchaq1I4rC2zYMj7W5sN4/o6US5rNB xJQPHM7dERF9NPxmUJjIB5BYqMelUbm8pwaj7TYW9XmYwJV10yaMyr/d/vmZF3MG bt/RqIeH3nmtmYKdC2f0mpp1lcQUKlwwTNmCcMonq+ok8wuohTpNJvOFUreg6yVN E0zbp+vRXyChhpBc/Do/VjoBoLvt4MVd -----END CERTIFICATE-----Generated at Mon Aug 11 01:52:13 2025 by rpki-client